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FAULT TOLERANT NETWORK SWITCH 

FIELD OF THE INVENTION 
This invention relates to switching devices and, more 
particularly, to switches for networks of devices such as 
computers employing Ethernet, fiber channel, Asynchronous 
Transfer Mode, or other networking technology to provide a 
degree of fault tolerance. 

BACKGROUND OF THE INVENTION 

It is well known to connect networks of computing 
devices such as hosts, printers, servers, etc. with switches 
that improve network performance by routing packets 
between pairs of devices that are in communication with 
each other, rather than over a common medium, which 
requires all devices to receive all packets. 

Switches, such as Ethernet switches, allow simultaneous 
connections between pairs of devices on a network and 
greatly improve the bandwidth of a network compared with 
non-switching techniques, such as hubs which use a physi- 
cally or logically common medium. 

Network switches commonly employed have a relatively 
small number of ports (4-64), each of which is connected to 
a single network segment. Since each network segment 
shares a common access medium, the number of devices on 
each switch segment is usually kept as small as practical. 
Where more devices are connected to a network, multiple 
interconnected switches are commonly used. Typically, the 
connections between the switches operate at a higher speed 
than the switch ports to improve network performance. 

In a network of the type described above, the failure of a 
single switch renders the network unavailable to all of the 
devices connected to that switch. For example, if a network 
switch fails, all of the devices attached to that switch are 
disconnected from the network until the switch is replaced. 
Network switches typically include components such as 
printed circuit boards, on which logical devices are 
mounted, power supplies, and other components, the failure 
of any one of which can render the entire switch inoperable. 
These so-called single point of failure network interruptions 
are very disruptive and expensive and improving the reli- 
ability of switches has become critically important. 

Many general purpose techniques for improving reliabil- 
ity have been applied to network switches. Providing redun- 
dant critical components is a commonly used approach and 
can overcome some of the single point of failure problems. 
For example, a network switch can be provided with redun- 
dant power supplies, cooling systems, and even switching 
circuits so that, upon the failure of one component, another 
component is automatically switched into place so that the 
switch continues to operate. It is a significant disadvantage 
of redundant fault protection of the type just described that 
it increases the cost of network switches without improving 
switching performance. Providing redundant power 
supplies, for example, involves the cost of providing a 
second power supply, which is almost never used, together 
with the circuitry for switching between a failed power 
supply and the backup power supply. Configuring the net- 
work switch so that the failed component can be replaced 
without interrupting its operation also adds cost and com- 
plexity. This type of redundancy is so expensive that its 
application is not justified except in situations where reli- 
ability is sufficiently critical that the excess cost is accept- 
able. 

SUMMARY OF THE INVENTION 

ll is an object of the present invention to provide a fault 
tolerant switching arrangement that overcomes some of the 
disadvantages just mentioned. 



19,895 Bl 

2 

The present invention is meant to offer a very cost 
effective and practical solution for improving reliability in 
communications, for example, in an Ethernet network. 
It is a particular object of the present invention to provide 

5 a fault tolerant network switch that includes two or more 
switches units and a highly reliable (i.e., one with no single 
point of failure) interconnect unit so that during normal 
operation both switches are actively handling network pack- 
ets and upon the failure of one of the switch units, another 

1° switch unit takes over, ensuring continued normal network 
operation, possibly with somewhat reduced performance. 
The failed switch unit can then be replaced and the network 
returned to its original performance without disturbance to 
the other switch or the network cable connections. 

15 Briefly stated and in accordance with a presently preferred 
embodiment of the invention, a fault tolerant switch com- 
prises two or more switch units, each having a plurality of 
switched ports and a hub having at least two ports connected 
to each switched port. Each switch unit is connected to an 

20 interconnect unit connecting each network segment to two 
or more of the hub ports on the two switch units. 

In accordance with a particularly preferred embodiment 
of the invention, a fault tolerant network switch includes a 
first switching controller having a plurality of switched 

25 ports, a first hub connected to one of the plurality of 
switched ports and a plurality of independently connectable 
network ports, each connected to the hub, the connectable 
network ports having two states, a normal state in which one 
of the network ports is connected to the hub, and a survivor 

30 state in which two or more of the network ports are con- 
nected to the hub, and a second switching controller having 
a plurality of switched ports, a second hub connected to one 
of the plurality of switched ports, and a plurality of inde- 
pendently connectable network ports connected to the bub, 

35 the connectable network ports of the second switching 
controller having two slates, a normal stale in which one of 
the network ports is connected to the hub, and a survivor 
state in which two or more of the network ports are con- 
nected to the hub, and a plurality of network connectors, 

40 each of which is connected in parallel to the network ports 
associated with each of the first and second hubs. 

In accordance with another aspect of the invention, each 
of the switch units includes a fault detector for monitoring 

45 the operation of the switch unit and, upon a fault, immedi- 
ately communicating this status information lo the fault 
detector of another switch unit. 

In accordance with another aspect of the invention, status 
information from the fault detector of one of the switch units 

50 is used within the same switch unit to change the state of the 
independently connected network ports. 

In accordance with another aspect of this invention, 
further redundancy is provided by having a third switching 
controller also having a plurality of switched ports, a third 

55 bub connected to one of the plurality of switched ports, and 
a plurality of independently connectable network ports con- 
nected to the third hub, the connectable network ports 
having two states, a normal state in which one of the 
networks is connected to the hub, and a survivor stale in 

60 which two or more of the network ports are connected to the 
hub. 

In accordance with another aspect of the invention, an 
interconnect unit for connecting a plurality of network 
switch units to a plurality of network ports includes a first 
65 multi-port connector adapted to be connected to a first 
network switch unit, a second multipart connector adapted 
to be connected to a second network switch unit, and a 
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plurality of single pon network connectors, eacb of which is 
connected in parallel to both the first and second connectors, 
the interconnect unit not including any single component, 
the failure of which affects more than one network port. 

In accordance with a further embodiment of the invention, 
the interconnect unit includes a plurality of isolation 
switches, each isolation switch connected to a network port 
of one of the first and second network switch units by way 
of one of the multiport connectors, for isolating the network 
port from the first and second connectors, the isolation 
switches being configured so that a failure of any isolation 
switch does not affect any other isolation switch. 

In accordance with a still further embodiment of the 
invention, a network switch unit includes a switching con- 
troller having a plurality of switched ports, a two state hub 
connected to one of the plurality of switched ports and 
having a plurality of network ports, the hub having two 
stales, a normal state in which one of the network ports is 
connected to the switched port and a survivor slate in which 
two or more of the network ports are connected to the 
switched port. 

In accordance with another aspect of the invention, the 
network switch unit includes a fault detector for providing a 
fault signal upon detecting a fault in the network switch unit. 

In accordance with another aspect of the invention, the 
network switch unit includes a control input for receiving a 
fault signal from another network switch unit. 

In accordance with still another aspect of the invention, 
the two state hub of a network switch unit are connected to 
the fault detector of that same network switch unit. 

In accordance with yet another aspect of the invention, the 
hub has a third, failure state, in which none of the network 
ports is connected to the switched port. 

A significant advantage of the fault tolerant network 35 
switch is nonstop performance at a modest system price, 
making fault tolerant network switching an affordable solu- 
tion for both small and large networks. Unlike conventional 
fault tolerant implementations, all switch components are 
active under normal conditions. 40 

The present invention embodies two or more switching 
units with an interface unit arranged in such a way that none 
of the cabling is disturbed when a switching unit is replaced. 
The present invention relates to a fault tolerant switch in 
which fault tolerance is provided for a single point of failure. 45 

In an embodiment of the fault tolerant switch of the 
present invention, two identical switch units each detect 
faults internally and relay the status to the other switch unit. 
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FIG. 5 shows a front view of the interconnect unit. 
FIG. 6 shows a rear view of the interconnect unit. 
FIG. 7 shows a front panel view of the switch unit without 
the interconnect unit attached. 

FIG. 8 shows a perspective view of the switch units and 
interconnect units. 

DETAILED DESCRIPTION OF THE 
PREFERRED EMBODIMENTS OF THE 
INVENTION 

In FIG. 1, a fault tolerant switch includes two network 
switch units SU1 and SU2 connected to an interconnect box 
or interface element. 

Network switch unit SU1 includes a switching controller 
50. The switching controller 50 includes the requisite hard- 
ware and software for detecting packets sent by a computing 
device such as a host connected to one of the ports and 
delivering each packet to a computing device, such as 
another host, or a printer or server connected to another port 
by decoding an address included in the packet and deter- 
mining the port to which the computing device to which the 
packet is addressed is connected. 

Network switch unit SU1 also includes a fault detector 70 
connected each of the switching controller 50, a power 
supply, a fan, and other components of the network switch 
unit SU1 the failure of which could cause the network switch 
unit to cease functioning, so that it is responsive to a fault in 
any of the components of the network switch unit SU1 to 
generate a fault signal and can communicate the fault signal 
to another network switch unit, or use it internally. The fault 
detector 70 is implemented through a combination of soft- 
ware and hardware. A manual mechanism may be provided 
per network switch unit to simulate a failure for maintenance 
purposes. 

Network switch unit SU1 also includes hubs 61, 62, 63 
connected to the switched ports 1A, 2 A, 3 A of the switching 
controller 50. Each hub 61, 62, 63 consists of three 
bi-directional ports, one port connected to a switched port 
I A, 2 A, 3 A of the switching controller 50 and at least two 
other ports primary port IP and secondary port IS. The hub 
is a shared media element which serves to make the three 
ports look logically connected. Three hubs are shown, but an 
actual system would contain between four and 64. 

Network switch unit SU2 is substantially identical to 
network switch unit SU1 and includes a switching controller 
80 having ports 4A, 5 A, 6A, hubs 91, 92, 93 and fault 
detector 100. 

The interconnect unit IU contains passive interconnect 
circuitry and isolation switches 20-31 which are preferably 
relays, solid state switches, or similar devices designed so 
that no single point of failure will affect more than one 
network or switch unit port. 

While the isolation switches 20-31 are illustrated as part 
of the switch units SU1 and SU2 in some embodiments of 
the invention, it will be understood that the switches may 
form a part of either the switch units or the interconnect unit 
without affecting the manner in which the invention oper- 
ates. Line length considerations and the speed of the network 
FIG. 3 is a block diagram of a third embodiment in which 60 connections may require that the Isolation switches be 
three network switch units share a single, integral intercon- located in the interconnect unit, or in the switch unit, 
nect unit in which isolation switches are contained within Network ports 20N, 21N, 22N, 23N, 24N, 25N, 26N, 
the interconnect unit. 27N, 28N, 29N, 30N, 31N serve as I/O ports of controllable 

FIG. 4 is a block diagram of a fourth embodiment in hubs formed from hubs 61, 62, 63, 91, 92, 93 and isolation 
which three network switch units share a single, integral 65 switches 20-31. Because of the bridging provided by the 
interconnect unit in which isolation switches are contained cabling internal to the interconnect element, there is no 
within the network switch units. single point of failure. 



BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a block diagram of a first embodiment of the 
invention in which two network switch units share a single, 
integral interconnect unit in which Isolation switches are 
contained within the interconnect unit. 

FIG. 2 is a block diagram of a second embodiment in 
which two network switch units share a single, integral 
interconnect unit in which isolation switches are contained 
within the network switch units. 
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Electrical connections 5 within the interconnect unit IU 
connect the primary ports IP, 2P, 3P of the hubs 61, 62, 63 
to the network connectors 10, 11, 12 via isolation switches 
20, 21, 22 and the secondary ports IS, 2S, 3S of the hubs 61, 
62, 63 to the network connectors 13, 14, 15. Similarly, the 
interconnect unit IU connects the primary ports 4P, 5P, 6P of 
the hubs 91, 92, 93 to the network connectors 13, 14, 15 and 
the secondary ports 4S, 5S, 6S of the hubs to the network 
connectors 10, 11, 12. 

FIG. 2 shows a second embodiment of the present inven- 
tion. FIG. 2 is the same as FIG. 1 except that the isolation 
switches 20-31 are now located within their corresponding 
switch units SU1 or SU2. 

FIG. 3 shows a third embodiment in which three network 
switch units SU1, SU2, SU3 share one interconnect unit IU. 

Network switch unit SU3 is similar in structure to net- 
work switch units SU1 and SU2 of the prior embodiments. 
Network switch unit SU3 has a switching controller 110, 
three hubs 121, 122, 123, network ports 32N, 33N, 34N, 
35N, 36N, 37N, and fault detector 130. 

The interconnect unit IU of the third embodiment is 
expanded to include three additional network connectors 16, 
17, 18 and a new set of isolation switches 32-37. The 
interconnect unit IU provides interconnection between net- 
work switch unit fault detectors arranged in a daisy chain 
configuration. Each fault detector is connected to two other 
fault detectors in a system of one interconnect unit for three 
or more network switch units. 

The embodiment shown in FIG. 3 uses a ring configura- 
tion in which each network switch unit has a partner that 
services the network connectors associated with the network 
switch unit in the event of a failure. As shown in FIG. 3, the 
partners are SU1-SU2, SU2-SU3, and SU3-SU1. The failure 
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four network switch unit housings 210. The interconnect 
unit panels 220 are mounted so as part of the rack assembly. 
Shelves 234 support the individual network switch unit 
panels 210. Additional support comes from a front panel 
232. Corner beams 230 complete the essential supportive 
structure of the rack mount 200. 

The operation of the fault tolerant network switch pro- 
ceeds generally as follows. 

When no fault is present, all network switch units are in 
the normal state wherein the primary isolation switches are 
logically closed (i.e., enabled) connecting the primary port 
of each hub to its respective network port, and the secondary 
isolation switches are open. The switch units operate 
independently, each handling packet traffic to and from 
computing devices located on network segments connected 
to their primary hub ports. An ongoing periodic communi- 
cation regarding the fault status of each network switch unit 
as well as setup and configuration parameters takes place 
between the switch units by means of their respective fault 
detectors such that each network switch unit is updated with 
the fault status and setup and configuration parameters of 
another switch unit. 

In the event a failure is detected in one of the network 
switch units, for example, network switch unit SU2, a signal 
FS from the network switch unit SU2's fault detector is used 
to place network switch unit SU2 in the fault state wherein 
both the network switch unit SU2's primary isolation 
switches and the secondary isolation switches are logically 
open and network switch unit SU2's primary and secondary 
hub ports are disconnected from their respective network 
ports. Also, in the event of a failure in network switch unit 



«f tk« fl«i ;« „ „ nrfr ,„„u- -I. u _ , e SU2, communications from network switch unit SU2 to 

ot the first network switch umt in a partnership will be 35 * . . , ... , , ... . „,„ 

■ ji . . , . . I • .i . r ^ network switch unit SU1 results in network switch unit SU1 

handled by the second network switch in that same partner- 
ship. For example, if network switch unit SU2 fails, the 
connections will be serviced by SU3. 

FIG. 4 shows a fourth embodiment which is a variant of 



entering the survivor state in which both the network switch 
unit SUl's primary isolation switches and secondary isola- 
tion switches arc logically closed. The resulting failure-state 
configuration has network ports 10-12 connected to network 
the third embodiment. In FIG. 4, the isolation switches <o switch unit surs primary hl)b pons 1Pj 2 p, 3P, network 



20-37 are incorporated into the corresponding network 
switch unit SU1, SU2, SU3. 

FIGS. 5 and 6 show front and back views of a physical 
implementation of the interconnect unit UI for a two net- 



ports 13-15 connected to the network switch unit SUl's 
secondary bub ports IS, 2S, 3S. Using the setup and 
failure -state configuration, network switch unit SU1 is able 
to handle packet traffic to and from network ports 13-15, 



work connectors 152. FIG. 6 shows the rear view 160 of the 45 originally handled by the failed network switch unit SU2, as 
interconnect unit. There are two multiport connectors 162 
which respectively mate to one of the network switch units. 

The interconnect unit is arranged so that either one of the ^ 
network switches can be removed and replaced without 5Q ^81/1. tte^ra^r^iMfc'si^TD^li^ 

normal operation would trigger survivor mode for network 



well as packet traffic to and from network ports 10-12. 

In the event that network switch unit SU2 were to fail in 
a manner that it could not report a failure state to network 



disturbing the other switch or any of the single port network 
connectors. This permits a network to survive a failure in 
one of the network switches without any interruption in 
service. When a failure occurs, the failed network switch 
unit is removed and replaced. During the failure, the other 
network switch unit services the network connections for- 
merly serviced by the failed network switch unit, and once 
the failed switch unit is replaced, full switched services are 
restored. 

FIG. 7 shows a front-side view of the network switch unit 
170. The mating connector 172 protrudes out from the 
recessed receiving surface for the interconnect unit panel. 
The interconnect unit panel 220 fits so that the front-side is 
flush with the rest of the front side of the switch unit 174. 

FIG. 8 shows a rack mounted arrangement of four net- 
work switch unit housings 210. Two-network-switch-unit 
interconnect unit panels 220 are each connected to two of the 
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switch unit SU1 while network switch unit SU2 would be in 
failure mode. 

When a fault condition occurs, the defective switch unit 
can be removed and replaced without interrupting network 
traffic. Once the defective switch unit is replaced and all 
switch units are once again operative, as determined by each 
switch unit's respective fault detector, all switch units return 
to normal state and the fault tolerant network switch is 
returned to its original configuration. 

While the invention has been described in terms of the 
preferred embodiments, those skilled in the art will recog- 
nize that many modifications and changes may be made 
therein without departing from the true spirit and scope of 
the invention which accordingly intended to be defined 
solely by the appended claims. 
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What is claimed is: 

1. A fault tolerant network switch, comprising: 
a first switch having a plurality of switched ports; 
a first fault detector associated with the first switch 

providing a fault signal upon detecting a fault in the 
first switch; 

a first hub connected to one of the plurality of switched 
ports; 

a plurality of independently connect able detwork ports 
connected to the first hub and having a control input 
connected to the first fault detector for receiving the 
fault signal, the con nec table network ports having two 
slates responsive to the fault signal: a normal state in 
which one of the network ports is connected to the first 
hub and a survivor state in which two or more of the 
network ports are connected to the first hub; 

a second switch having a second plurality of switched 
ports; 

a second fault detector associated with the second switch 
providing a fault signal upon detecting a fault in the 
second switch; 

a second bub connected to one of the second plurality of 
switched ports; 

a plurality of independently connect able network ports 
connected to the second hub and having a control input 
connected to the second fault detector for receiving the 
fault signal, the connectable network ports having two 
states responsive to the fault signal: a normal state in 
which one of the network ports is connected to the 
second hub and a survivor state in which two or more 
of the network ports are connected to the second hub; 
and 

a plurality of network connectors each of which is con- 
nected in parallel to the network ports associated with 35 
each of the firsthand second hubs. 

2. The fault tolerant network switch of claim 1 in which 
the plurality of independently connectable network ports 
comprise relays. 

3. The fault tolerant network switch of claim 1 in which 
the independently connectable network ports comprise solid 
state switches. 

4. The fault tolerant network switch of claim 1, wherein 
the network ports are part of a network selected from the 
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to be connected to the plurality of independently connect- 
able network ports, form a unitary interconnect unit. 

9. A fault tolerant network switch, comprising: 

a first switching controller having a plurality of switched 
pons; 

a first fault detector associated with the first switch 
providing a fault signal upon detecting a fault in the 
first switch; a first hub connected to one of the plurality 
of switched ports of the first switching controller; 

a first plurality of independently connectable network 
ports connected to the first hub and having a control 
input for receiving the fault signal, the connectable 
network ports having two states responsive to the fault 
signal: a normal state in which one of the network ports 
is connected to the hub and a survivor state in which 
two or more of the network ports are connected to the 
hub; 

a second switching controller having a plurality of 
switched ports; 

a second fault detector associated with the second switch- 
ing controller providing a fault signal upon detecting a 
fault in the second switching controller; 

a second hub connected to one of the plurality of switched 
ports of the second switching controller; 

a second plurality of independently connectable network 
ports connected to the second hub and having a control 
input for receiving a fault signal, the connectable 
network ports having two states responsive to the fault 
signal: a normal state in which one of the network ports 
is connected to the hub and a survivor state in which 
two or more of the network ports are connected to the 
hub; 

a plurality of network connectors each of which is con- 
nected in parallel to the network ports associated with 
each of the first and second hubs at least one of the first 
and second hubs having an additional third state: a 
failure state in which none of the network ports is 
connected to the switched port. 

10. The fault tolerant network switch of claim 9, in which 
the first fault detector is connected to the control input of the 
first plurality of independently connectable network ports. 

11. The fault tolerant network switch of claim 9, in which 
the first fault detector is connected to the control input of the 



group consisting of Ethernet, fiber channel, token ring, or 45 ^ of ind dcnll nctwork 

asynchronous transfer mode. r J r J 

5. The fault tolerant network switch of claim 1, further 
comprising: 

a switch controller having a plurality of switched ports; 
a third hub connected to one of the plurality of switched 50 
ports; and 

a plurality of independently connectable network ports 
connected to the hub, the connectable network ports 
having two states: a normal slate in which one of the 
network ports is connected to the hub and a survivor 55 
state in which two or more of the network ports are 
connected to the hub. 

6. The fault tolerant network switch of claim 1, wherein 
the plurality of independently connectable network ports, 
the plurality of network connectors, and the connections 60 
between the network ports and the network connectors from 
a unitary interconnect unit. 

7. The fault tolerant network switch of claim 2, wherein 
the network relays and connectors are housed in a single 
unit. 65 

8. The fault tolerant network switch of claim 1, in which 
the network connectors, and a multiport connector, adapted 



ports. 

12. A fault tolerant network switch, comprising: 

a first switch having a plurality of switched ports; 

a first fault detector associated with the first switch 

providing a fault signal upon detecting a fault in the 

first switch; 

a first hub connected to one of the plurality of switched 
ports of a first switching controller; 

a first plurality of independently connectable network 
ports comprising an isolation switch connected to ihe 
first hub, and having a control input for receiving the 
fault signal, the connectable network ports having two 
states responsive to the fault signal: a normal state in 
which one of the network ports is connected to the hub 
and a survivor state in which two or more of the 
network ports are connected to the hub; 

a second switch having a plurality of switched ports; 

a second hub connected to one of the plurality of switched 
ports of the second switch; 

a second plurality of independently connectable network 
ports comprising an isolation switch connected to the 
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second hub, and having a control input for receiving a 
fault signal, the connectable network ports having two 
states responsive to the fault signal: a normal state in 
which one of the network ports is connected to the hub 
and a survivor state in which two or more of the 5 
network ports are connected to the hub; and 
a plurality of network connectors each of which is con- 
nected in parallel to the network ports associated with 
each of the first and second hubs. 

13. The fault tolerant network switch of claim 12, wherein 10 
the interconnect unit further comprises the isolation switches 

of the hubs. 

14. A fault tolerant network switch, comprising: 

a first switch having a plurality of switched ports; 

a first fault detector associated with the first switch is 

providing a fault signal upon detecting a fault in the 

first switch; 

a first hub connected to the of the plurality of switched 
ports; 

a first plurality of independently connectable network 20 
ports connected to the first hub and having a control 
input for receiving a fault signal, the first plurality of 
independently connectable network ports having two 
states responsive to the fault signal: a normal state in 
which one of the network ports is connected to the hub 25 
and a survivor state in which two or more of the 
network ports are connected to the hub; 

a second switch having a second plurality of switched 
ports; 

a second fault detector associated with the second switch 30 
providing a fault signal upon detecting a fault in the 
second switch; 

a second hub connected to one of the second plurality of 
switched ports; 

a second plurality of independently connectable network 
ports connected to the second hub and having a control 
input for receiving a fault signal, the second plurality of 
independently connectable network ports having two 
states responsive to the fault signal: a normal state in ^ 
which one of the network ports is connected to the hub 
and a survivor state in which two or more of the 
network ports are connected to the hub; and 

a plurality of network connectors each of which is con- 
nected in parallel to the network ports associated with 4J 
each of the first and second hubs; wherein the plurality 
of independently connectable network ports, the plu- 
rality of network connectors, and the connections 
between the network ports and the network connectors 
form a single integral interconnect unit which mounts 5Q 
to a rack. 

15. The fault tolerant network switch of claim 12, wherein 
the isolation switch is a relay. 

16. A fault tolerant network switch, comprising: 

a first switch having a plurality of switched ports; 55 
a first fault detector associated with the first switch 

providing a fault signal upon detecting a fault in the 

first switch; 

a first hub connected to one of the plurality of switched 
ports of the first switch; 60 

a first plurality of independently connectable network 
ports connected to the first bub and having a control 
input for receiving a fault signal, the connectable 
network ports having two states: a normal state in 
which one of the network ports is connected to the hub 65 
and a survivor stale in which two or more of the 
network ports are connected to the hub; 
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a second switch having a plurality of switched ports; 
a second fault detector associated with the second switch 
providing a fault signal upon detecting a fault in the 
second switch; 
a second hub connected to one of the plurality of switched 

ports of the second switch; 
a second plurality of independently connectable network 
ports connected to the second hub and having a control 
input for receiving a fault signal, the second plurality of 
independently connectable network ports having two 
states responsive to the fault signal: a normal state in 
which one of the network ports is connected to the 
second hub and a survivor state in which two or more 
of the network ports are connected to second the hub; 
a plurality of network connectors each of which is con- 
nected in parallel to the network ports associated with 
each of the first and second hubs; 
further comprising: 
a third switch having a plurality of switched ports; 
a third hub connected to one of the plurality of switched 
ports; 

a third fault detector providing a fault signal upon 

detecting a fault in the third switch; and 
a third plurality of independently connectable network 
ports connected to the third hub and having a control 
input for receiving a fault signal, the third plurality 
of independently connectable network ports having 
two states responsive to the fault signal: a normal 
state in which one of the network ports is connected 
to the hub and a survivor state in which two or more 
of the network ports are connected to the hub. 
17. A fault tolerant network switch, comprising: 
a first switch having a plurality of switched ports; 
a first fault detector associated with the first switch 
providing a fault signal upon detecting a fault in the 
first switch; 

a first hub connected to one of the plurality of switched 
ports; 

a first plurality of independently connectable network 
ports connected to the first hub and having a control 
input for receiving a fault signal, the first plurality of 
independently connectable network ports having two 
states responsive to the fault signal: a normal state in 
which one of the network ports is connected to the hub 
and a survivor state in which two or more of the 
network ports are connected to the hub; 
a second switch having a second plurality of switched 
ports; a 

a second fault detector associated with the second switch 
providing a fault signal upon detecting a fault in the 
second switch; 
a second hub connected to one of the second plurality of 

switched ports; 
a second plurality of independently connectable network 
ports connected to the second hub and having a control 
input for receiving a fault signal, the second plurality of 
independently connectable network ports having two 
states responsive to the fault signal: a normal state in 
which one of the network ports is connected to the hub 
and a survivor state in which two or more of the 
network ports are connected to the hub; 
a plurality of network connectors each of which is con- 
nected in parallel to the network ports associated with 
each of the first and second hubs; and 
wherein each switch and its corTesponding fault detector, 
the switched ports, and the hubs are housed in a single 
unit. 
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18. A fault tolerant network switch, comprising: 

a first switch having a plurality of switched ports; 

a first fault detector associated with the first switch 

providing a fault signal upon detecting a fault in the 

first switch; 

a first hub connected to one of the plurality of switched 
ports; 

a first plurality of independently connectable network 
ports connected to the first hub and having a control 
input for receiving a fault signal, the first plurality of 
independently connectable network ports having two 
states responsive to the fault signal: a normal slate in 
which one of the network ports is connected to the hub 
and a survivor state in which two or more of the 
network ports are connected to the hub; 

a second switch having a plurality of switched ports; 

a second fault detector associated with the second switch 
providing a fault signal upon detecting a fault in the 
second switch; 

a second hub connected to one of the second plurality of 
switched ports; 

a second plurality of independently connectable network 
ports connected to the second hub and having a control 
input for receiving a fault signal, the second plurality of 
independently connectable network ports having two 
states responsive to the fault signal: a normal state in 
which one of the network ports is connected to the hub 
and a survivor state in which two or more of the 
network ports are connected to the hub; and 

a plurality of network connectors each of which is con- 
nected in parallel to the network ports associated with 
each of the first and second hubs in which the switch, 
the switched ports, the hubs, the fault detector, and the 
independently connectable network ports form a uni- 
tary network switch unit. 

19. An interconnect unit for connecting a plurality of 
network switch units to a plurality of network ports, com- 
prising: 

a first multiport connector adapted to be connected to a 

first network switch; 
a first fault detector connected to the first network switch 

and providing a fault signal upon detecting a fault in the 

switch; 

a second multiport connector adapted to be connected to 

a second network switch; 
a second fault detector connected to the second network 

switch and providing a fault signal upon detecting a 

fault in the switch; 
a plurality of single port network connectors each of 

which is connected in parallel to both of the first and 

second multiport connectors; 
in which each network switch comprise a control input for 

receiving a fault signal from a fault detector associated 

with the other network switch; and 
the interconnect unit not including any single component 

the failure of which affects more than one network port. 

20. The interconnect unit of claim 19, comprising: 

a plurality of isolation switches, each isolation switch 
adapted to be connected to a network port of the first 
and second network switch units by way of one of the 
multiport connectors, for isolating the network port 
from the first and second connectors, the isolation 
switches being configured so that a failure of any 
isolation switch does not affect any other isolation 
switch. 
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21. An interconnect unit for connecting a plurality of 
network switch units to a plurality of network ports, com- 
prising: 

a first multiport connector adapted to be connected to a 
5 first network switch unit; 

a first fault detector connected to the first network switch 

and providing a fault signal upon detecting a fault in the 

switch; 

iQ a second multiport connector adapted to be connected to 

a second network switch unit; 
a second fault detector connected to the second network 

switch and providing a fault signal upon detecting a 

fault in the switch; 
1S a plurality of single port network connectors each of 

which is connected in parallel to both of the first and 

second multiport connectors; 
the interconnect unit not including any single component 

the failure of which affects more than one network port; 
20 and 

a plurality of isolation switches, each Isolation switch 
adapted to be connected to a network port of the first 
and second network switch units by way of one of the 
multiport connectors, for isolating the network port 

25 from the first and second connectors; and including a 
control input for receiving a fault signal from a fault 
detector the isolation switches being configured so that 
a failure of any isolation switch does not affect any 
other isolation switch. 

30 22. The interconnect unit of claim 20, in which the 
isolation switch is a solid state switch. 

23. The interconnect unit of claim 19, in which the 
interconnect unit is a single, integral unit. 

24. The interconnect unit of claim 23, in which the 
35 interconnect unit includes supports for supporting the first 

and second network switch units. 

25. An interconnect unit for connecting a plurality of 
network switch units to a plurality of network ports, com- 
prising: 

40 a first multiport connector adapted to be connected to a 

first network switch unit; 
a second multiport connector adapted to be connected to 

a second network switch unit; 
45 a plurality of single port network connectors each of 

which is connected in parallel to both of the first and 

second connectors; 
the interconnect unit not including any single component 

the failure of which affects more than one network port; 
50 and 

a plurality of isolation switches, each isolation switch 
adapted to be connected to a network port of the first 
and second network switch units by way of one of the 
multiport connectors, for isolating the network port 

55 from the first and second connectors, the isolation 
switches being configured so that a failure of any 
isolation switch does not affect any other isolation 
switch in which power for operating the isolation 
switches comes from the first and second network 

60 switch units. 

26. An interconnect unit for connecting a plurality of 
network switch units to a plurality of network ports, com- 
prising: 

first and second fault detectors connected to the first and 
65 second network switches respectively, each fault detec- 
tor providing a fault signal upon detecting a fault in the 
switch; 
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a first multiport connector disposed on a first major 
opposing surface of the interconnect unit adapted to be 
connected to a first network switch; 

a second multiport connector disposed on a first major 
opposing surface of the interconnect unit adapted to be 
connected to a second network switch; 

a plurality of single port network connectors each of 
which is connected in parallel to both of the first and 
second connectors; and including a control input for 
receiving a fault signal from a fault detector; and 

the interconnect unit not including any single component 
the failure of which affects more than one network port. 

27. The interconnect unit of claim 26, wherein a plurality 
of network ports are disposed on a second major opposing 
surface of the interconnect unit. 

28. An interconnect unit for connecting a plurality of 
network switch units to a plurality of network ports, com- 
prising: 

a first multiport connector adapted to be connected to a 

first network switch unit; 
a second multiport connector adapted to be connected to 

a second network switch unit; 
a plurality of single port network connectors each of 

which is connected in parallel to both of the first and 

second connectors; 
the interconnect unit not including any single component 

the failure of which affects more than one network port; 

and 

in which one of the first and second network switch units 
can be disconnected from the interconnect unit and 
replaced without disturbing the other of the first and 
second network switch units or connections to the 
network connectors. 

29. A network switch unit comprising: 

a switch having a plurality of switched ports and a fault 
detector connected to the and providing a fault signal 
upon detecting a fault in the switch; 
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30. The network switch unit of claim 29, comprising a 
fault detector for providing a fault signal upon detecting a 
fault in the network switch unit. 

31. The network switch unit of claim 30, comprising a 
control input for receiving a fault signal. 

32. A network switch unit comprising: 

a switching controller having a plurality of switched 
ports; and 

a two-state hub connected to one of the plurality of 
switched ports and having a plurality of network ports, 
the hub having two states: a normal state in which one 
of the network ports is connected to the switched port 
and a survivor slate in which two or more of the 
network ports are connected to the switched port, 
comprising a fault detector for providing a fault signal 
upon detecting a fault in the network switch unit, 
comprising a control input for receiving a fault signal- 
ing which the control input is connected to the two- 
state hub so that a fault signal from another switch unit 
controls the state of the two-state hub. 

33. A network switch unit comprising: 

a switch having a plurality of switched ports; 

a two-state hub connected to one of the plurality of 
switched ports and having a plurality of network ports, 
the hub having two states: a normal state in which one 
of the network ports is connected to the switched port 
and a survivor state in which two or more of the 
network ports are connected to the switched port; and 

a fault detector for providing a fault signal upon detecting 
a fault in the network switch unit comprising a control 
input for receiving a fault signal the hub having a third 
state: a failure state in which none of the network ports 
is connected to the switched port. 

34. The network switch unit of claim 33, in which the 
control input is connected to the two -state hub so that a fault 
signal internal to the switch unit controls the two-state hub. 



35. The network switch unit of claim 29, wherein the 

two-state hub connected to one of the plurality of 40 switch unit is modular and manually removable from an 

switched ports and having a plurality of network ports assembly of similar network switch units without disturbing 

and a control input for receiving a fault signal from a any other network switch units or network connections, 

fault detector, the hub having two states: a normal state 36. The network switch unit of claim 35, in which the 

in which one of the network ports is connected to the control input is connected to the two-state hub so that a fault 

switched port and a survivor state entered in response 45 signal internal to the switch unit controls the two-state hub. 
to the fault signal in which two or more of the network 

ports are connected to the switched port. * * • * + 
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UNITED STATES PATENT AND TRADEMARK OFFICE 

CERTIFICATE OF CORRECTION 

PATENT NO. : 6,639,895 Bl Page 1 of 1 

DATED : October 28, 2003 

INVENTOR(S) :Hellesetal. 

It is certified that error appears in the above-identified patent and that said Letters Patent is 
hereby corrected as shown below: 

Column 14. 

Lines 43-45, reading: 

"36. The network switch unit of claim 35, in which the control input is connected to the 
two-state hub so that a fault signal internal to the switch unit controls the two-state hub." 
should read: 

- 36. A fault tolerant network switch comprising: 
a plurality of network connectors; 

a first switcher having a first plurality of switched ports less than the number of 
network connectors; 

a second switcher having a second plurality of network ports less than the 
number of network connectors; 

a switchable coupler connecting the network connectors to the switched ports 
of the first and second switchers the coupler connecting each switched port to one net- 
work connector in a first mode, and connecting at least one switched port to a plurality 
of network connectors in a second mode; and 

a fault detector coupled to the first and second switchers and to the switchable 
coupler for detecting a fault in one of the first and second switchers and switching the 
switchable coupler to the second mode when a fault is detected. ~ 



Signed and Sealed this 
Tenth Day of February, 2004 




JON W. DUD AS 
Acting Director of the United States Patent and Trademark Office 
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